Unscored CVE-2005-0261 EUVD-2005-0262GHSA-4hcm-j3j9-cf5f

lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users t…

Published Feb 10, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

lspath in AIX 5.2, 5.3, and possibly earlier versions, does not drop privileges before processing the -f option, which allows local users to read one line of arbitrary files.

References

IY67655 vendor-advisory
ibm-aix-ispath-information-disclosure(19281) vdb-entry
20050210 IBM AIX lspath Local File Access Vulnerability third-party-advisory
14232 third-party-advisory
12513 vdb-entry
IY67457 vendor-advisory